Stuff

Networking --> Network Packet filter --> select Network packet filtering (replaces ipchains)

expand IP: Netfilter configuration

Connection tracking (required for masq/NAT) built in

IP tables support (required for filtering/masq/NAT)

under IP tables support I have IP range match support, TOS match support, address type match support, Packet filtering, Full NAT, under full NAT I have "Redirect target support"